• corsicanguppy
    link
    fedilink
    English
    arrow-up
    1
    ·
    3 months ago

    pip is …

    … a tool that obscures its state from the system, gleefully supports supply-chain attacks, and has the same bad level of validation as debs.